Cannot change mailbox rights 1

[PaulGillespie]

I have just set up a new network with 1 2003 server DC, DNS, DHCP, and 1 member server running exchange 2003 only.

Everything is functioning correctly except...

When i try to give a user rights to another user's mailbox by going into AD then the user account properties - exchange advanced - mail box rights then click add, select the user and tick all the boxes except "associated external user" click OK, i get an error box that pops up saying "Unable to save permission changes on user. Access is denied". This happens on all mailboxes and i cannot change any permissions what so ever.

I'm stuck! Anyone with any suggestions would be greatly appreciated.

Thanks in advance.

Paul

 

[sundance1980]

Seems like you do not have the permission to change this. who are you logging in as? what are your perms?

 

[PaulGillespie]

I'm logging in as administrator. Quite strange, i don't quite get it.

 

[PaulGillespie]

Some more info for you,

In mailbox rights, the administrator account is listed with DENY full mail box access! This is greyed out so i think that it is inherited. I cant find a way of removing inherited permissions.

Cheers

 

[PaulGillespie]

I have just created another user in AD and granted it administrator rights. When i log onto the server as this new user i CAN change the mailbox rights for all the users.

Anyone know why this is the case? I would much prefer to log on as administrator than this other user.

Thanks

Paul

 

[volleyman]

open Exchange System Manger software. Start at the top of the hierarchy and right-click, go to properties then permissions tab. Check to see if Administor account has deny for full mailbox access. Work your way down the hierarchy until you find the location from which the mailboxes are inheriting permissions.

 

[ttrsux]

volleyman you rule. after 3 minutes of google-ing this topic i found this post and solved my problem.

-THANKS!!

 

[PaulGillespie]

Thanks, i'll give it a go and see what happens. I'm just scared that if i remove inherited permissions, then it will have an effect on something else.

Thanks again